topic PEAP MSCHAP V2 - Machine authentication not working in Wireless

PEAP MSCHAP V2 - Machine authentication not working

colmgrier — Sat, 03 Jul 2021 23:12:38 GMT

I have successfully got users to connect to the WLAN using PEAP-mschapv2 (no CA certificate on laptop) but I cannot get machine authentication to work.

At the moment I can get all users with diallin tab ticked to connect to the WLAN from a domain member laptop and a non member laptop. I would like to implement machine authentication so that only domain laptops will allow users to connect to the WLAN using PEAP-mschapv2.

Objective:

Allow domain user (dialin tab ticked) connected to the Wlan using a domain laptop or pc.

Please advise.

Re: PEAP MSCHAP V2 - Machine authentication not working

amritpatek — Mon, 28 Jul 2008 13:26:25 GMT

For the configuration setting for for PEAP (EAP-MSCHAP v2) Authentication follow the configuration guide http://www.cisco.com/en/US/docs/wireless/technology/peap/technical/reference/PEAP_D.html#wp1008130

Re: PEAP MSCHAP V2 - Machine authentication not working

krishanmistry — Tue, 05 Aug 2008 20:49:28 GMT

For all laptop and tablet clients to authenticate using the machine credential, you need to input the below registration keys on Client/Supplicant,

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EAPOL\Parameters\General\Global]

â€¢ SupplicantMode =dword:00000003

â€¢ AuthMode =dword:00000002

Krishan

Convergis